Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft
File:                     6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft (raw, json)
Hash identifier:          ZXOBVVWtWjpN4HMHSzDc0JDXzRmblhdaw98VxgZoAVg=
Subject key identifier:   5A:7A:77:C1:7D:AE:B4:4F:8A:39:E5:4C:DC:6E:25:83:8B:B1:37:48
Authority key identifier: E9:8E:EC:B7:30:F1:A9:4A:66:A9:B5:12:FC:77:57:78:C6:00:83:0D
Certificate issuer:       /CN=A911954F/serialNumber=E98EECB730F1A94A66A9B512FC775778C600830D
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Y7stzDxqUpmqbUS_HdXeMYAgw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft
Manifest number:          021D
Signing time:             Sat 09 Aug 2025 04:48:17 +0000
Manifest this update:     Sat 09 Aug 2025 04:48:16 +0000
Manifest next update:     Sat 16 Aug 2025 04:48:16 +0000
Files and hashes:         1: 6Y7stzDxqUpmqbUS_HdXeMYAgw0.crl (hash: ufe/xBG58fF6TEUqKznIqQO+Qf0rjAjMeRzWcijSPdU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.crl
                          rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Y7stzDxqUpmqbUS_HdXeMYAgw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911954F, serialNumber=E98EECB730F1A94A66A9B512FC775778C600830D
        Validity
            Not Before: Aug  9 04:48:16 2025 GMT
            Not After : Aug 16 04:48:16 2025 GMT
        Subject: CN=6896d311-0cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:94:eb:3e:1e:1b:64:78:c9:51:f1:f2:a5:4a:
                    24:21:52:5d:a3:c4:91:2b:88:c3:41:13:2f:7e:36:
                    f0:8c:f0:42:77:5d:51:8c:7d:ec:4c:48:9c:5f:6b:
                    5c:31:eb:33:3c:d5:e3:be:e4:24:69:84:13:e8:75:
                    db:14:db:f1:42:f1:62:7c:5a:0f:22:be:d7:f2:87:
                    b6:f3:bc:a2:39:b9:3f:bf:be:69:e7:d7:4e:7e:3e:
                    a5:bd:8f:3e:bb:49:ad:8f:2e:85:12:7e:03:7c:27:
                    02:f8:6e:26:53:96:90:56:d8:1b:60:f0:f5:6d:f9:
                    b9:99:d4:bc:b1:21:f9:bc:c9:cf:7d:50:bd:e5:55:
                    7b:a8:df:4c:bd:7d:06:47:b0:9e:cb:20:53:6a:8c:
                    1e:51:ce:1b:13:86:16:c7:1e:23:36:23:1d:fe:27:
                    78:d1:97:b0:3b:cd:88:d1:cc:eb:44:ea:23:c2:43:
                    42:de:8f:77:11:ed:7f:34:3b:55:04:86:92:e4:79:
                    53:9a:11:97:fa:e9:8f:85:16:42:e5:64:fd:e8:e4:
                    cb:eb:e8:ce:c1:8f:ea:5d:c7:21:81:01:64:5b:33:
                    85:8f:5e:6a:ce:17:dc:39:6a:1e:5f:bf:24:63:69:
                    e8:25:f9:e3:9b:84:ee:ee:34:11:23:48:00:90:5f:
                    a3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7A:77:C1:7D:AE:B4:4F:8A:39:E5:4C:DC:6E:25:83:8B:B1:37:48
            X509v3 Authority Key Identifier:
                keyid:E9:8E:EC:B7:30:F1:A9:4A:66:A9:B5:12:FC:77:57:78:C6:00:83:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Y7stzDxqUpmqbUS_HdXeMYAgw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:aa:00:69:4e:f0:2e:2f:65:e7:7d:38:11:00:66:58:c9:68:
         01:3c:f7:05:10:aa:ca:f5:36:45:c9:a9:fb:ef:6f:c9:d7:04:
         83:d7:f9:b3:6e:0a:41:55:e2:8e:f5:1c:0f:fb:0f:90:cf:26:
         90:ab:54:2d:55:08:41:55:bc:70:a2:76:67:62:c8:03:82:9d:
         66:bb:02:ef:4c:4a:cf:94:d1:d7:22:82:84:db:f9:cb:2d:ff:
         52:14:48:2a:a1:0e:07:b4:71:75:d7:da:73:8c:ca:cd:3d:c3:
         47:19:2b:fc:66:86:61:d7:29:80:f0:cc:07:e3:e4:4c:59:19:
         df:87:55:e4:cb:10:a7:23:26:1b:00:6c:fe:a3:44:d9:c4:4c:
         ee:8c:4c:c3:a2:cf:79:36:23:38:0a:1c:cd:b1:62:6f:b0:d5:
         33:ed:fd:ad:a4:76:e7:5e:b3:7c:e2:8f:e5:d8:3b:5b:fd:01:
         d8:24:fd:5e:47:a4:3b:01:ff:17:8d:15:9e:0b:47:7d:7f:ca:
         23:35:67:89:1f:3b:76:a4:d1:e1:fd:dd:0c:11:3e:7c:4e:ca:
         bd:19:af:25:8a:98:5a:27:5f:ae:a3:6b:75:db:94:8b:b1:dc:
         89:66:40:43:07:27:d8:8f:3c:b8:3d:92:75:59:27:76:11:8c:
         b5:19:4b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:58:54 2025 by rpki-client